Incident management for complex information technology platforms

A computer program product stored on a computer readable storage medium, which when executed by a computing system, provides incident management for a complex information technology (IT) infrastructure, the program product comprising:

• program code that analyzes an IT infrastructure and generates a topology of components and users;
• program code that compares ongoing activities of the IT infrastructure with a pattern repository to identify potential problems;
• program code that generates relationship maps of components and users based on the topology, determines whether an identified potential problem comprises an incident, and in response to detecting an incident:
• correlates the incident with a root cause, and
• determines a responsible admin and set of impacted users based on the relationship maps;
• and
• program code that notifies the responsible admin and set of impacted users of the incident.

A computerized method that performs incident management for a complex information technology (IT) infrastructure, the method comprising:

• analyzing an IT infrastructure and generating a topology of components and users;
• comparing ongoing activities of the IT infrastructure with a pattern repository to identify potential problems;
• generating relationship maps of components and users based on the topology;
• determining whether an identified potential problem comprises an incident, and in response to detecting an incident:
• correlating the incident with a root cause, and
• determining a responsible admin and set of impacted users based on the relationship maps;
• and
• notifying the responsible admin and set of impacted users of the incident.